mediumkernelverified ✓rollback-safe
Disable uvcvideo kernel module
kmod-disable-uvcvideo · RHEL ≥ 8 · 1 impl
Description
The uvcvideo kernel module provides driver support for USB Video Class devices such as built-in and attached cameras. On systems where the camera is not required, the module must be disabled so the device cannot be activated.
Rationale
Disabling an unused camera driver prevents the collaborative computing device from being activated unexpectedly and reduces the kernel attack surface.
Check → Remediate
Checkkernel_module_state
- name:
- uvcvideo
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- uvcvideo
Framework references
STIG
V-230493 / RHEL-08-040020
NIST 800-53
CM-7
Live verification
rhel8:check
#kernel-module#camera#attack-surface